Improve company productivity with a Business Account.Sign Up

x
?
Solved

Microsoft Exchange Server Installed on a Member Server

Posted on 2009-04-10
6
Medium Priority
?
262 Views
Last Modified: 2012-05-06
I'm installing Microsoft Exchange 2000 on a Microsoft 2000 Server and the server will be located in the DMZ of our filewall.  My question is can the Microsoft 2000 Server be a member server or does this server have to be an active directory domain controller?
0
Comment
Question by:jnelipowitz
  • 3
  • 2
6 Comments
 
LVL 10

Expert Comment

by:ashwin_kumar525
ID: 24117084
As long as it can contact a Domain Controller, it is fine where you keep it.
0
 
LVL 65

Expert Comment

by:Mestha
ID: 24117237
Although whatever your reasons for wanting to put the machine in the DMZ, I can guarantee that they are wrong. There are no good reasons for putting an Exchange server in the DMZ, certainly not a Windows 2000/Exchange 2000 system which cannot defend itself from even the most basic of attacks (directory harvest).

Why are you putting this server in the DMZ? What is its purpose in there?
If it is for anything "security" related then you have been misguided.

Simon.
0
 

Author Comment

by:jnelipowitz
ID: 24117331
My understanding is that our existing Exchange 5.5 Server was place in the DMZ of our Cisco 515e PIX firewall for security.  The DMZ is a separate subnet that can not be contacted by the Domain Controller.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
LVL 65

Expert Comment

by:Mestha
ID: 24117366
The security reason is completely false. Putting an Exchange server does not improve your security in any shape or form. It actually reduces your security. Due to the way that Exchange works, it needs to constantly communicate with a domain controller, that domain controller needs to be the same one as the main backend server. If your DMZ cannot see the production network then you cannot run Exchange in the DMZ.

What does the server actually do/will do? SMTP, OWA, something else?

Simon.
0
 

Author Comment

by:jnelipowitz
ID: 24117578
It will be a standard Exchange 2000 server with the SMTP connector.  
0
 
LVL 65

Accepted Solution

by:
Mestha earned 2000 total points
ID: 24117762
What is going to do though? Is it just to pass email through?
If so then you would be better off with a regular Windows 2003 server and a copy of Vamsoft ORF. You can then open two ports only between the DMZ and the production network (25 for SMTP email and the LDAP port).
Cheaper than an Exchange license and doesn't require the machine to be a member of the domain.

http://www.amset.info/exchange/gateway.asp

Simon.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

This article involves a discussion about issues people have when it comes to Client Access in relating to Load Balancing in an Exchange environment which we had ourselves, along with a solution I found to the problem.
How to import Outlook calendar to MS Exchange Server. A Calendar stores user appointments, meetings details to manage work. Moving Outlook Calendar to a new or already existing Exchange Server become complex process if Admin needs to import Calendar…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question